Your API keys and tokens are being logged by most online formatters.
100% client-side. No accounts, no data collection, no tracking.